CLAIMS 

What is claimed is: 

1 . A medical data base supervisor^ control system comprising: 

(a) at least one data base including medical data 
individually relating to each of a plurality of patients, 

(b) internet and/o/intranet means for requesting and 
accessing said medical data, 

(c) means fof identifying medical data for each of said 
patients with conditionsWequired for accessing of said medical data, and 

(d) data processing means for comparing said request 
with said conditions required for access of said data and, when said 
request fails to comply 

2. A system of Claim 1 further including means for authenticating 
the identity of the requesting party. 

3. The system of Claim 2 further including means to prevent 
^roqu o s l c fo^ tnformation concerning medical records by any party without 
the prior authorization of the patient about whom such records pertain. 

4. The system of Claim 1 further including means for tentatively 
identifying records fulfilling 4be>criteria specified in said request for medical 
data. 

v 7 5. The system of Claim 4 further including means for 

enticating me identity of we-patient. 
6. The system of Claim 1 wherein said means for requesting said 
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medical data includes means for indicating what part of said records is 
desired. 

7. The system of Claim 1 wherein said means for requesting 
access to said medical records includes means for indicating the reason 
said records are being requested. 

8. The system of Claim ^including means for identifying records 
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fulfilling^uefrrequest fflo l udo data symbolic of4he-patient identity. 

9. The system of Claim 8 wherein said means for identifying 
records fulfilling -sueta-request further include data symbolic of medical 

A 

symptoms or reason for patient visit. 

1 0. The system of Claim 8 wherein said means for identifying 
records fulfilling^uoh request further include data symbolic of types of 
diagnostic tests performed. 

1 1 . The system of Claim 1 0 wherein said means for identifying 

5Q<d 

records fulfilling -suet* request further include data symbolic of the 

A 

attributes, levels or findings indicated within said diagnostic tests. 

12. The system of Claim 8 wherein said means for identifying 
records fulfilling-j&ueh request further include data symbolic of modes of 
treatment or medical services rendered. 

13. The system of Claim 8 wherein said means used for identifying 

Said 

records fulfilling ^ueh-request further include data symbolic of any 
ancillary services rendered. 

14. The system of Claim 8 wherein said means used for identifying 
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records fulfilling .such request further include data symbolic of attending 

A 

physician identity. 

1 5. The system of Claim 8 wherein said means for identifying 
records fulfilling^ueh request further include data symbolic of date of 
care. 

16. The system of Claim 1 wherein said means for requesting and 
accessing said medical data includes means for indicating a "standing 
order" that will automatically initiate an attempt to retrieve certain pre- 
determined types of medical data under specific pre-specified 
circumstances. 

17. The system of Claim 1 wherein said conditions required for 
accessing said medical data includes an indication of the names of each 
of the parties who's permission must be obtained prior to the release of 

Jher'such medical data. 

18. The system of Claim 17 wherein said conditions required for 
accessing said medical data further includes an indication of the charge 
that will be assessed by the holder of such medical data for the part, or in 
the form, specified by the requesting party. 

19. The system of Claim 17 wherein said conditions for accessing 
said medical data includes means indicating the time following the receipt 
of all approvals that will be required for the delivery of such medical data 
to the requesting party. 

20. The system of Claim 1 wherein said at least one data base 
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includes a firewall limiting access to searching such data base solely to 
those parties who are authorized to do so. 

21. The system of Claim 1 wherein said means for identifying 
medfcal data fulfilling the criteria specified in a request include a means 
foriproducing an indicia of the degree to which data listed in such data 
index match the criteria specified in such request 

22. The system of Claim 1 including means for a party to grant 
permission to the release of such medical. / 

23. The system of Claim 22 wherein said at least one data base 
includes a billing means for access to said medical data. 

24. The system of Claim 22 wherein said means to grant 
permission includes data symbolic of the identity of such party and data 
symbolic of the preferred means for contacting such party to request 
access to and release of said patient's medical data. 

25. The system of Claim 23 wherein said means for a party to 
grant permission includes data symbolic of rules to be followed in the 
event time elapses before such permission is granted in the case of pre- 
determined types of requests for such medical data. 

26. The system of Claim n further including means for identifying 
the party requesting access to such medical data. 

27. The system of Claim 26 further including means for 
authenticating the identity oyeach party with such right of approval to the 
release of such medical data. 
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28. The system of Claim 27 further including means for producing 
an indicia that all required approvals for the release of such medical data 
have been secured. 

29. The system of Claim 28 further including means for producing 
an indicia of the required approvals for the release of such medical data 
that have not been secured, or that have been specifically declined. 

30. The system of Claim 20 further including means for physically 
disconnecting said at least one data/oase from data index means, the 
transmission means to online memory cache means and all other outside 
parties except during the batch /process of uploading pre-designated and 
fully-approved requests for medical data. 

31 . The system of Claim 30 further including interface engine 
means enabling a search agent means to index said at least one data 
base of medical data. 

32. The system of Claim 1 further including means for billing said 
requesting party forj^e charge related to access to the medical data. 

33. The system of Claim 1 further including means for delivering 
mecjjfcal data to a requesting party incl jding means for transmitting 
medical data held in digital form to an online memory cache means. 

34. The system of Claim 33 wherein said online memory cache 
includes a firewall limiting access to s^id memory cache exclusively to 
authorized users. 

35. The system of Claim 33 fufther including means for producing 
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an indicia that the requested medical data have been received in an 
online memory cache means and ape being held there for download by 
the requesting party. 

36. The system of Claim S4 further including means for the 
requesting party to enter through th|e firewall and download said medical 
data from memory cache means. 

37. The system of Claim 1 ^including means for delivering 
medical data to the requesting party. 

38. The system of Claim 37 further including means for 
informing the requesting party when medical data is in a non-digital form 
and the mode of such delivery. 

39. The system of Claim 1 further including means for 
encrypting all communications within the system. 

40. The system of Claim 1 further including security log means 
for retaining an audit trail with regard to all of the communications within 

y$be system. 

41 . The system of Claim 1 further comprising means for allowing 



partes to advertise in the public portions of said system. 

42. A method of controlling access ft medical data in a medical 
data base comprising: 

(a) maintaining at least 6ne data base including medical 
data individually relating to each of a plurality of patients, 

(b) identifying medical data for each of said patients with 
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indicia indicative of conditions required for access of said medical data, 

(c) selectively introducing internet and/or intranet 
requests for access to said data, and 

(d) comparing said requests with said conditions; and, 
when said requests fails to comply )Mth said conditions, automatically 
denying access to said data 

43. The method of Claim 42 further includes the step of 
authenticating the identity of \hef requesting party. 

44. The method of Claim 43 further includes the step of^ pr o v o nt i ny 
requests for information concerning medical records by any party without 
the prior authorization of the patient about whom such records pertain. 

45. The method of Claim 42 further including the step of tentatively 



identifying records fulfillingJbeTcriteria specified in said^request-for medical 
data. / 

46. The method of Claim 45 further including the step of 
L/authenticating the identity of the/patient. 

47. The method of Clairfi 42 wherein said step of requesting said 
medical data includes the step of indicating what part of the records is 
desired by the requesting par 

48. The method of yiaim 42 wherein said step of requesting 
access to said medical records includes the step of indicating the reason 

" d ™ arebein9 7 ues,ed 

49. The methodybf Claim 42 including the step of identifying 
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records fulfilling such request include^ata symbolic of the patient identity. 

50. The method of Claim 49 wherein said step of identifying 

WJ relish* 
r> records fulfilling su^drreques^ further include data symbolic of medical 

symptoms or reason for patient visit. 

51 . The method of Claim 49 wherein said step of identifying 

said rep'S-h 

^ records fulfilling-strclT request A further include data symbolic of types of 
diagnostic tests performed. 

52. The method of Claim 51 wherein said step of identifying 
^ records fulfilling^such-requesyunher include data symbolic of the 

attributes, levels or findings indicated within said diagnostic tests. 

53. The method of Claim 49 wherein said step of identifying 

treatment or medical services rendered 



/3 records fulfilling^sueh requesUurfher include data symbolic of modes of 



54. The method of Claim 49 wherein said step of identifying 
records fulfilling^suGtHFeqyest A further include data symbolic of the ancillary 



services rendered. 




55. The method of Claim 49 wherein said step of identifying 
records fulfilling -su c h r e quest further include data symbolic of attending 



physician identity. 

56. The method of Claim 49 wherein said step of identifying 
records fulfilling^welMBquesHunher include data symbolic of date of 
care. 

57. The method of C&im 42 wherein said step of requesting and 
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accessing said medical data includes the step of indicating a "standing 
order" that will automatically initiate an attempt to retrieve certain pre- 
determined types of medical data under specific pre-specified 
circumstances. 

58. The method of Claim 42 whe/ein said conditions required for 
accessing said medical data includes thfe step of indicating the names of 
each of the parties who's permission npiust be obtained prior to the release 
of such medical data. 

59. The method of Claim 58 wherein said conditions required for 
accessing said medical data include^ an indication of the charge that will 
be assessed by the holder of such medical data for the part, or in the 
form, specified by the requesting party. 

60. The method of Claim 58 wherein said conditions for accessing 
said medical data include^4he-step of indicating the time following the 
receipt of all approvals that will be required for the delivery of such 
medical data to the requesting party. 

61 . The method of Claim 42 wherein maintaining said at least one 
data base includes maintaining a firewall limiting access to searching said 
data base solely to those parties who are authorized to do so. 

_y62. The method of Claim 42 wherein said step for identifying 

medical data fulfilling the criteria specified in a request includes the step 
df producing an indicia of the degree to which data listed in such data 
index match the criteria Specified in such request. 
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63. The method of Claim 42 including the step of providing for a 
party to grant its permission to the release of such medical data. 

64. The method of Claim 63 wherein said step of identifying 
medical data includes^tbe'step of billing for access to said medical data. 

^^^65. The method of Claim 63 wher^/n said step of providing for a 
party to grant permission includes data symbolic of the identity of such 
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and data symbolic of the preferred/means for contacting such party 
to request access to and to the release of said patient's medical data. 

66. The method of Claim 64 w/ierein said step of providing for a 
party to grant permission includes data symbolic of rules to be followed in 
the event time elapses before such/permission is granted in the case of 
pre-determined types of requests for such medical data. 

67. The method of Claim 42 further including the step of identifying 



the party requesting access to such medical data. 

68. The method of Claiy 67 further including the step of 
authenticating the identity of each party with such right of approval to the 



release of such medical data./ 



69. The method of Claim 68 further including the step of producing 
an indicia that all required approvals for the release of such medical data 



have been secured. 



70. The method of Claim 69 further including the step of producing 
an indicia of the required approvals for the release of such medical data 
that have not been secured, or that have been specifically declined. 
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71. The method of Claim 61 further including the step of physically 
disconnecting said at least one data base from data index means, the 

* e means and all other outside 



uploading pre-designated and 



including the step of providing 



transmission means to online memory cacf 
parties except during the batch process of 
fully-approved requests for medical data. 

72. The method of Claim 71 furtherf i 
an interface engine making it possible for a search agent means to index 
said at least one data base of medical data. 

73. The method of Claim 42 further including the step of billing the 
requesting party for the charge related t6 delivery of the medical data. 

74. The method of Claim 42 furtjner including the step of delivering 
medical data to the requesting party includes the step of transmitting 
records held in digital form to an online memory cache. 

75. The method of Claim 72 wherein said online memory cache 
includes a firewall limiting access to paid memory cache exclusively to 
authorized users. 

76. The method of Claim 72f further including the step of producing 
an indicia that the requested mediial data have been received in an 
online memory cache and are beipg held there for download by the 
requesting party. 

77. The method of Cla^m 76 further including the step of 
permitting a properly credential^ requesting party to enter through the 
firewall and download said medical data from the memory cache. 
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78. The method of Claim 42 including^© step of delivering 
records to the requesting party. 

79. The method of Claim 78 further including the* step of 
informing^rf^ requesting party when medical data is in a non-digital form 
and the mode of such delivery. 

80. The method of Claim 42/further including the step of 



encrypting all communications between the parties. 
/ 81 . The method of Claim 42 further including the step of creating 
a security log and retaining an audit trail with regard to all of the 
communications between the parties. 
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